Simon Ward

Simon’s Simple Contact Form is a fast, lightweight contact form plugin built for people who want a clean, modern form that “just works” — without the bloat.
It includes 18 built-in themes, optional SMTP for better deliverability, and spam protection via Google reCAPTCHA or a simple internal captcha. You can switch themes instantly from the admin panel and get a beautiful front-end form in minutes.
Perfect for: 
– Business websites & service pages 
– Portfolio sites 
– Landing pages 
– Blogs & small shops that just need a reliable contact form
<h3>Key Features</h3>
✅ 18 Included Themes 
– One-click theme switching in the admin (AJAX) 
– Clean, modern styles with readable inputs 
– Mobile responsive
✅ SMTP (Optional) 
– Enable SMTP for improved email deliverability 
– Host, port, encryption (TLS/SSL), username & password 
– Leave password blank to keep your saved password
✅ Spam Protection 
– Choose Google reCAPTCHA (v2/v3 compatible) or the internal captcha 
– Internal captcha is simple and user-friendly 
– reCAPTCHA keys are stored in settings and verified server-side
✅ Email Control 
– Set a custom Sender (From) address (optional) 
– Set a Reply-To override (optional) or use the visitor’s email
✅ Addon System 
– Upload addon ZIPs from the plugin admin area (optional feature) 
– Addons can include Theme Packs and a Theme Editor (if installed) 
– “Purchase Addons” button links to your addon shop page (your site)
<h3>Addons (Theme Packs + Theme Editor)</h3>
Want even more styles and full control?
<ul>
<li>Theme Packs: expand your theme library with additional collections.</li>
<li>Theme Editor: create your own themes (background images, overlay strength, button gradients, border radius, shadows).</li>
</ul>
Addon shop: 
https://simonward.net/product-category/plugin-addons/
<h3>Usage</h3>
Add the contact form to any post or page using the shortcode:
<pre><code>[sscfp_contact_form]
</code></pre>
Backwards compatibility: if you were using the old shortcode, it still works:
<pre><code>[simple_contact_form]
</code></pre>
After adding the shortcode: 
– Pick your preferred theme under the Themes tab. 
– Configure SMTP (optional) under Settings. 
– Choose captcha type (Internal captcha or Google reCAPTCHA).
<h3>External services</h3>
This plugin can optionally connect to Google reCAPTCHA to help prevent spam submissions.
When Google reCAPTCHA is enabled in the plugin settings:
<ul>
<li>The visitor’s browser loads Google’s reCAPTCHA JavaScript from google.com when the form is displayed.</li>
<li>On form submission, the plugin sends the reCAPTCHA token (and, if available, the visitor’s IP address) to Google’s verification endpoint to validate the challenge.</li>
</ul>
Google reCAPTCHA is provided by Google LLC.
<ul>
<li>Terms: https://policies.google.com/terms</li>
<li>Privacy: https://policies.google.com/privacy</li>
</ul>
<h4>Does this plugin require SMTP?</h4>
No. SMTP is optional. You can use your default WordPress mail configuration, or enable SMTP for better deliverability.
<h4>Which captcha options are available?</h4>
You can choose: 
– Internal Captcha (simple “solve the sum” style) 
– Google reCAPTCHA (v2/v3 compatible)
<h4>How do I change the email sender / reply-to?</h4>
In Settings, you can configure: 
– Sender (From) address (optional) 
– Reply-To override (optional) 
If Reply-To is blank, it will default to the visitor’s email.
<h4>How many themes are included?</h4>
18 included themes are built into the plugin. You can also extend with theme pack addons.
<h4>Can I add more themes?</h4>
Yes — via the Addons tab (if you use theme pack addons). You can also use the Theme Editor addon (if installed) to make your own.
<h4>Will it work on mobile?</h4>
Yes. The form themes are designed to be responsive.
<h4>Where are addon ZIPs installed?</h4>
Addons are extracted into: 
 /wp-content/uploads/sscfp-addons/
<h4>Is this plugin GDPR friendly?</h4>
The plugin does not add tracking. If you enable Google reCAPTCHA, Google may process user data per their policies. If you want to avoid third-party services, use the internal captcha.

Simon's Simple Contact Form

A lightweight WordPress contact form plugin with 18 themes, SMTP support, Google reCAPTCHA or internal captcha, and instant theme switching.

LukaCodes

AntiSpam Shield by LukaCodes is a lightweight, no-bloat plugin that protects your WordPress comment section and contact forms from spam. Six independent tools, one settings page. <a href="https://lukacodes.com/comment-shield-docs/" rel="nofollow ugc">Read the full documentation</a>.
<ul>
<li>Disable Website Field — Removes the URL/website field from the comment form. Works with all themes, including those that hardcode the field (CSS fallback included).</li>
<li>Strip Links from Comments — Automatically removes all <code><a href></code> hyperlinks from comment content — both on display and before saving to the database. Spammers get zero benefit from posting links.</li>
<li>reCAPTCHA v3 — Adds Google’s invisible bot-score protection. No checkbox, no puzzle, no friction for real users. Bots are silently blocked server-side.</li>
<li>Cloudflare Turnstile — A privacy-friendly CAPTCHA alternative. Mutually exclusive with reCAPTCHA v3 — enabling one automatically disables the other.</li>
<li>Login Shield — Adds CAPTCHA to the WordPress login form (<code>wp-login.php</code>). Stops brute-force bots silently.</li>
<li>Registration Shield — Adds CAPTCHA to the WordPress registration form. Blocks bot account creation.</li>
<li>WPForms Integration — Apply the same CAPTCHA protection to WPForms Lite — using the same keys you already configured, no extra setup.</li>
<li>Easy Contact Form by LukaCodes Integration — Apply the same CAPTCHA protection to forms created with the companion Easy Contact Form plugin.</li>
</ul>
All features are independent — enable only what you need.
<h4>Login & Registration Shield</h4>
Version 1.1.2 adds CAPTCHA protection to <code>wp-login.php</code>:
<ul>
<li>Login Shield — Hooks into <code>wp_authenticate_user</code> for server-side verification after credentials are checked. Returns a <code>WP_Error</code> if CAPTCHA fails — WordPress displays it as a normal login error.</li>
<li>Registration Shield — Hooks into <code>registration_errors</code> to add CAPTCHA validation during registration. Works alongside all other WordPress registration validations.</li>
</ul>
Both are independently togglable in the settings panel. Admins already logged in are never affected.
<h4>WPForms Integration</h4>
Version 1.1.0 introduces CAPTCHA protection for WPForms Lite:
<ul>
<li>Hooks into <code>wpforms_display_submit_before</code> to inject the CAPTCHA widget before the submit button.</li>
<li>Hooks into <code>wpforms_process</code> for server-side token verification.</li>
<li>Works with both reCAPTCHA v3 (invisible) and Cloudflare Turnstile (visible widget).</li>
</ul>
Note: WPForms Pro includes its own native CAPTCHA integration — this feature is intended for WPForms Lite users only.
<h4>Easy Contact Form by LukaCodes Integration</h4>
Version 1.1.4 adds CAPTCHA protection for forms created with <a href="https://wordpress.org/plugins/lukacodes-easy-contact-form/" rel="ugc">Easy Contact Form by LukaCodes</a>:
<ul>
<li>Injects the CAPTCHA widget (Turnstile) or invisible token (reCAPTCHA v3) into every Easy Contact Form on the page.</li>
<li>Hooks into Easy Contact Form’s <code>lukacodes_comment_shield_check</code> filter for server-side token verification before the submission is processed or emails are sent.</li>
<li>Uses the same CAPTCHA keys you already configured — no extra setup.</li>
<li>When a token fails, the user sees a CAPTCHA-specific error message inline; the submission is never stored or emailed.</li>
</ul>
<h4>Why AntiSpam Shield?</h4>
Most anti-spam plugins are heavy, require accounts, or add ugly CAPTCHAs. AntiSpam Shield by LukaCodes is different:
<ul>
<li>~30 KB total — no external libraries, no jQuery dependency</li>
<li>Settings page with live key testing — verify your reCAPTCHA or Turnstile keys before enabling</li>
<li>Link stripping preview — paste any comment text and see exactly what gets removed</li>
<li>Graceful fallback: if Google’s or Cloudflare’s API is unreachable, comments are held for moderation (never lost)</li>
<li>Trusted users (administrators) bypass CAPTCHA checks automatically</li>
<li>Mutual exclusion: reCAPTCHA v3 and Cloudflare Turnstile cannot be active at the same time</li>
<li>WP Coding Standards compliant — fully escaped output, nonce-protected AJAX</li>
</ul>
<h4>reCAPTCHA v3 — How it works</h4>
When a visitor submits a form, JavaScript silently requests a score token from Google. The token is sent with the submission and verified server-side against your minimum score threshold (configurable from 0.1 to 1.0). No user interaction required.
<h4>Cloudflare Turnstile — How it works</h4>
A Turnstile widget is rendered inside the form. When the visitor completes the challenge, a token is submitted and verified server-side against the Cloudflare API.
<h3>Third-Party Services</h3>
This plugin optionally uses the following third-party services:
<h4>Google reCAPTCHA v3</h4>
A service provided by Google LLC.
<ul>
<li>What it does: Detects bots and spam on your comment form and contact forms without user interaction.</li>
<li>When data is sent: Only when reCAPTCHA v3 is enabled. A token is sent to <code>https://www.google.com/recaptcha/api/siteverify</code> on each form submission.</li>
<li>What data is sent: The visitor’s IP address and a reCAPTCHA token.</li>
<li>Google Privacy Policy: https://policies.google.com/privacy</li>
<li>Google Terms of Service: https://policies.google.com/terms</li>
</ul>
<h4>Cloudflare Turnstile</h4>
A service provided by Cloudflare, Inc.
<ul>
<li>What it does: Presents a privacy-friendly CAPTCHA widget on comment and contact forms.</li>
<li>When data is sent: Only when Cloudflare Turnstile is enabled. A token is sent to <code>https://challenges.cloudflare.com/turnstile/v0/siteverify</code> on each form submission.</li>
<li>What data is sent: The visitor’s IP address and a Turnstile token.</li>
<li>Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/</li>
<li>Cloudflare Terms of Service: https://www.cloudflare.com/website-terms/</li>
</ul>
Both services are entirely optional. If you do not enter API keys or enable either CAPTCHA, no data is sent to any third party.

AntiSpam Shield by LukaCodes

Block comment spam, brute-force logins and bot registrations with reCAPTCHA v3 or Cloudflare Turnstile. Lightweight, no bloat.

Simon's Simple Contact Form vs AntiSpam Shield by LukaCodes